From 0a86bc474f354f58d4976f32b961b3bcd52d8e59 Mon Sep 17 00:00:00 2001
From: zhouxudong <zhouxudong@easycorp.ltd>
Date: Wed, 29 Jun 2022 07:10:13 +0000
Subject: [PATCH] * Fix bug #24417.

---
 module/group/view/browse.html.php  | 6 +++---
 module/project/view/group.html.php | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/module/group/view/browse.html.php b/module/group/view/browse.html.php
index ab349fafe6..f3414dc39c 100644
--- a/module/group/view/browse.html.php
+++ b/module/group/view/browse.html.php
@@ -67,9 +67,9 @@
               }
               else
               {
-                  $deleteURL = $this->createLink('group', 'delete', "groupID=$group->id&confirm=yes");
-                  js::set("confirmDelete{$group->id}", sprintf($lang->group->confirmDelete, $group->name));
-                  echo html::a("javascript:ajaxDelete(\"$deleteURL\", \"groupList\", confirmDelete{$group->id})", '<i class="icon icon-trash"></i>', '', "title='{$lang->group->delete}' class='btn'");
+                  $deleteURL     = $this->createLink('group', 'delete', "groupID=$group->id&confirm=yes");
+                  $confirmDelete = htmlspecialchars(sprintf($lang->group->confirmDelete, $group->name));
+                  echo html::a("javascript:ajaxDelete(\"$deleteURL\", \"groupList\", \"$confirmDelete\")", '<i class="icon icon-trash"></i>', '', "title='{$lang->group->delete}' class='btn'");
               }
           }
           ?>
diff --git a/module/project/view/group.html.php b/module/project/view/group.html.php
index 7f567e4efa..bdcde15dd7 100644
--- a/module/project/view/group.html.php
+++ b/module/project/view/group.html.php
@@ -59,9 +59,9 @@
           <?php
           if(common::hasPriv('group', 'delete') and $group->role != 'limited')
           {
-              $deleteURL = $this->createLink('group', 'delete', "groupID=$group->id&confirm=yes");
-              js::set("confirmDelete{$group->id}", sprintf($lang->group->confirmDelete, $group->name));
-              echo html::a("###", '<i class="icon icon-trash"></i>', '', "onclick='ajaxDelete(\"$deleteURL\", \"groupList\", confirmDelete{$group->id})' title='{$lang->group->delete}' class='btn btn-icon'");
+              $deleteURL     = $this->createLink('group', 'delete', "groupID=$group->id&confirm=yes");
+              $confirmDelete = htmlspecialchars(sprintf($lang->group->confirmDelete, $group->name));
+              echo html::a("###", '<i class="icon icon-trash"></i>', '', "onclick='ajaxDelete(\"$deleteURL\", \"groupList\", \"$confirmDelete\")' title='{$lang->group->delete}' class='btn btn-icon'");
           }
           else
           {